About the author.

Hi, I'm m1rr0r100501. This is my personal blog on web security — finding bugs, understanding how they work, and building reproducible proof-of-concepts.

The archive contains 40 articles. It covers access control, injection, browser behavior, authentication, and the less obvious edges of web applications.

Responsible use

The techniques here are shared for education and authorized testing. Test only systems you own or have explicit permission to assess. Everything here reflects my own views.